| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2011-3656 | 4.3 | Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP 0.9 errors, non-default ports, and content-sniffing. | 2021-06-10 16:17:00 | 2021-06-02 17:15:00 |
| CVE-2020-35441 | 7.5 | FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php. | 2021-06-10 16:16:00 | 2021-06-02 22:15:00 |
| CVE-2021-30180 | 6.8 | Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dub | 2021-06-10 16:08:00 | 2021-06-01 14:15:00 |
| CVE-2021-30181 | 7.5 | Apache Dubbo prior to 2.6.9 and 2.7.9 supports Script routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these r | 2021-06-10 16:05:00 | 2021-06-01 14:15:00 |
| CVE-2021-27488 | 6.8 | Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing CATPart files. This could result in an out-of-bounds | 2021-06-10 16:05:00 | 2021-05-27 16:15:00 |
| CVE-2021-33181 | 6.5 | Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to intranet resources via unspecified vectors. | 2021-06-10 15:57:00 | 2021-06-01 14:15:00 |
| CVE-2021-33183 | 3.6 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume management component in Synology Docker before 18.09.0-0515 allows local users to read or write arbitrary files via unspecified vectors. | 2021-06-10 15:53:00 | 2021-06-01 14:15:00 |
| CVE-2021-33184 | 4.0 | Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors. | 2021-06-10 15:41:00 | 2021-06-01 14:15:00 |
| CVE-2020-1716 | 9.0 | A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain adm | 2021-06-10 15:27:00 | 2021-05-28 13:15:00 |
| CVE-2021-33564 | 6.8 | An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead to code execution. The problem occurs | 2021-06-10 15:20:00 | 2021-05-29 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: